Browse CVEs

CRITICAL 9.3 CVE-2026-59549 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. No fix yet Fix from $2,3002026-07-27 HIGH 7.5 CVE-2026-59548 Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.4 CVE-2026-59546 Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59539 Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. No fix yet Fix from $1,9502026-07-27 CRITICAL 9.3 CVE-2026-59538 Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. No fix yet Fix from $2,3002026-07-27 HIGH 7.6 CVE-2026-59537 Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59536 Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.3 CVE-2026-59535 Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59534 Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. No fix yet Fix from $1,9502026-07-27 CRITICAL 9.3 CVE-2026-59533 Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. Mitigation only Fix from $2,3002026-07-27 HIGH 7.5 CVE-2026-59532 Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59531 Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59530 Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59529 Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-59528 Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. No fix yet Fix from $1,9502026-07-27 CRITICAL 9.3 CVE-2026-59527 Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. No fix yet Fix from $2,3002026-07-27 MEDIUM 6.5 CVE-2026-10819 Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.7.x <= 11.7.4 fail to limit the number of frames and enforce the file… Mattermost Server 10.11.21 / 11.6.6+ Fix from $1,6002026-07-27 MEDIUM 5.1 CVE-2025-59180 Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with acces… No fix yet Fix from $1,6002026-07-27 MEDIUM 6.8 CVE-2025-59177 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute spe… No fix yet Fix from $1,6002026-07-27 HIGH 8.5 CVE-2025-59172 Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacke… No fix yet Fix from $1,9502026-07-27 CRITICAL 9.8 CVE-2026-65879 Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret a… No fix yet Fix from $2,3002026-07-27 HIGH 8.3 CVE-2026-65878 Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a… No fix yet Fix from $1,9502026-07-27 HIGH 8.2 CVE-2026-65877 Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media … Mitigation only Fix from $1,9502026-07-27 CRITICAL 9.2 CVE-2026-65876 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMo… No fix yet Fix from $2,3002026-07-27 CRITICAL 9.2 CVE-2026-65766 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynami… No fix yet Fix from $2,3002026-07-27 CRITICAL 9.8 CVE-2026-61511 vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the … No fix yet Fix from $2,3002026-07-27 MEDIUM 5.3 CVE-2026-17514 A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract… No fix yet Fix from $1,6002026-07-27 MEDIUM 5.6 CVE-2026-15003 A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker pro… No fix yet Fix from $1,6002026-07-27 HIGH 8.0 CVE-2026-59690 A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi… Connection Manager For Objectscale 7.1.35.16 / 7.2.54.19+ Fix from $1,9502026-07-27 HIGH 8.0 CVE-2026-59689 An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF all… Connection Manager For Objectscale 7.2.54.19 / 7.2.63.3+ Fix from $1,9502026-07-27